Merge pull request #16887 from hvitved/ruby/local-flow-missing-steps

Ruby: Add missing local flow steps
github · Jul 2, 2024 · 8e8100f · 8e8100f
2 parents 19e910e + 7fdc09c
commit 8e8100f
Show file tree

Hide file tree

Showing 3 changed files with 810 additions and 0 deletions.
diff --git a/ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll b/ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll
@@ -646,6 +646,8 @@ private module Cached {
     or
     LocalFlow::localSsaFlowStepUseUse(_, nodeFrom, nodeTo)
     or
+    LocalFlow::localFlowSsaInputFromRead(_, nodeFrom, nodeTo)
+    or
     // Simple flow through library code is included in the exposed local
     // step relation, even though flow is technically inter-procedural
     FlowSummaryImpl::Private::Steps::summaryThroughStepValue(nodeFrom, nodeTo, _)